Hermes AI agent used to automate attack on Thai Finance Ministry

Attackers used Hermes, an open-source AI agent, in unattended "YOLO mode" (a setting that removes human approval requirements for dangerous commands) to automate attacks on Thailand's Ministry of Finance. Researchers discovered exposed files containing web shells, stolen credentials, and logs showing the AI agent performing tasks like privilege escalation (gaining higher-level system access) and system enumeration (mapping out network resources) without human oversight.